Threat database

69 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	8.2	EPSS 0.5%	CVE-2026-48898Joomla! CMS · Improper Access Control Critical8.2EPSS 0.5%2026-05-27CVE Database V5CVE-2026-48898 CVE-2026-48898 is a high-severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.5%Vulnerability Joomla! Project #cwe-284 #bit-joomla-2026-48898 #bitnami	CVE Database V5	2026-05-27
High	5.9	EPSS 0.5%	CVE-2026-40384Joomla! CMS · Improper Limitation of a Pathname to a Restricted Directory High5.9EPSS 0.5%2026-05-26CVE Database V5CVE-2026-40384 CVE-2026-40384 is a medium severity path traversal vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.5%Vulnerability Joomla! Project #cwe-22 #bit-joomla-2026-40384 #bitnami	CVE Database V5	2026-05-26
Critical	7.5	EPSS 0.6%	CVE-2026-40383Joomla! CMS · Improper Limitation of a Pathname to a Restricted Directory Critical7.5EPSS 0.6%2026-05-26CVE Database V5CVE-2026-40383 CVE-2026-40383 is a high-severity vulnerability in Joomla! CMS versions 3.2.1 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.6%Vulnerability Joomla! Project #cwe-22 #bit-joomla-2026-40383 #bitnami	CVE Database V5	2026-05-26
Critical	8.6	EPSS 0.5%	CVE-2026-35223Joomla! CMS · Improper Access Control Critical8.6EPSS 0.5%2026-05-26CVE Database V5CVE-2026-35223 CVE-2026-35223 is a high-severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.5%Vulnerability Joomla! Project #cwe-284 #bit-joomla-2026-35223 #bitnami	CVE Database V5	2026-05-26
Critical	6.9	EPSS 0.5%	CVE-2026-35222Joomla! CMS · SQL Injection Critical6.9EPSS 0.5%2026-05-26CVE Database V5CVE-2026-35222 Improperly validated order clauses lead to a SQL injection vulnerability in com_tags. EPSS 0.5%Vulnerability Joomla! Project #cwe-89 #bit-joomla-2026-35222 #bitnami	CVE Database V5	2026-05-26
Critical	6.9	EPSS 0.5%	CVE-2026-35221Joomla! CMS · SQL Injection Critical6.9EPSS 0.5%2026-05-26CVE Database V5CVE-2026-35221 CVE-2026-35221 is a SQL injection vulnerability in Joomla! CMS affecting versions 5.4.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.5%Vulnerability Joomla! Project #cwe-89 #bit-joomla-2026-35221 #bitnami	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-48903Joomla! Framework Filter package · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-48903 CVE-2026-48903 is a medium severity cross-site scripting (XSS) vulnerability in the Joomla! Framework Filter package. It arises from inadequate content filtering in the checkAttribute methods, allowing improper neutralization of input during web page generation. This affects Joomla! Framework Filter package versions 1.0.0 through 3.0.5 and 4.0. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
High	8.2	EPSS 0.4%	CVE-2026-48896Joomla! CMS · Improper Authentication High8.2EPSS 0.4%2026-05-26CVE Database V5CVE-2026-48896 CVE-2026-48896 is a high-severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.4%Vulnerability Joomla! Project #cwe-287	CVE Database V5	2026-05-26
Medium	4.6	EPSS 0.1%	CVE-2026-35220Joomla! CMS · Cross-Site Request Forgery (CSRF) Medium4.6EPSS 0.1%2026-05-26CVE Database V5CVE-2026-35220 A Cross-Site Request Forgery (CSRF) vulnerability exists in Joomla! CMS versions 6.0.0 through 6.1.0 due to lack of CSRF token validation in the admin activation endpoint of the com_users component. This vulnerability allows an attacker with high privileges and user interaction to potentially perform unauthorized actions via crafted requests. The CVSS 4.6 score reflects a medium severity level. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.1%Vulnerability Joomla! Project #cwe-352	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-48905Joomla! Framework Filter package · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-48905 CVE-2026-48905 is a medium severity cross-site scripting (XSS) vulnerability in the Joomla! Framework Filter package affecting versions 1.0.0 through 3.0.5 and 4.0.0 through 4.0.1. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
High	8.2	EPSS 0.4%	CVE-2026-48897Joomla! CMS · Improper Authentication High8.2EPSS 0.4%2026-05-26CVE Database V5CVE-2026-48897 CVE-2026-48897 is a high-severity vulnerability in Joomla! CMS versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.4%Vulnerability Joomla! Project #cwe-287	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-25901Joomla! CMS · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-25901 CVE-2026-25901 is a medium severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
Medium	6.4	EPSS 0.3%	CVE-2026-48900Joomla! CMS · Improper Access Control Medium6.4EPSS 0.3%2026-05-26CVE Database V5CVE-2026-48900 CVE-2026-48900 is a medium severity vulnerability in Joomla! CMS versions 4.1.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.3%Vulnerability Joomla! Project #cwe-284	CVE Database V5	2026-05-26
Critical	9.8	EPSS 0.3%	CVE-2026-48902Joomla! CMS · Vulnerability Critical9.8EPSS 0.3%2026-05-26CVE Database V5CVE-2026-48902 The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set. EPSS 0.3%Vulnerability Joomla! Project	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-25900Joomla! CMS · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-25900 CVE-2026-25900 is a cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 3.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-30895Joomla! CMS · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-30895 CVE-2026-30895 is a medium severity cross-site scripting (XSS) vulnerability in Joomla! CMS affecting versions 4.0.0 through 5.4.5 and 6.0.0 through 6.1.0. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
Medium	6.9	EPSS 0.2%	CVE-2026-30894Joomla! CMS · Cross-site Scripting Medium6.9EPSS 0.2%2026-05-26CVE Database V5CVE-2026-30894 Lack of output escaping leads to a XSS vector in the content history component. EPSS 0.2%Vulnerability Joomla! Project #cwe-79	CVE Database V5	2026-05-26
High	7.5	EPSS 0.4%	CVE-2026-48901Joomla! CMS · Vulnerability High7.5EPSS 0.4%2026-05-26CVE Database V5CVE-2026-48901 The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key. EPSS 0.4%Vulnerability Joomla! Project	CVE Database V5	2026-05-26
High	6.9	EPSS 0.3%	CVE-2026-21630Joomla! CMS · SQL Injection High6.9EPSS 0.3%2026-04-01CVE Database V5CVE-2026-21630 Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. EPSS 0.3%Vulnerability Joomla! Project #cwe-89 #bit-joomla-2026-21630 #bitnami	CVE Database V5	2026-04-01
High	6.3	EPSS 0.2%	CVE-2026-21629Joomla! CMS · Improper Access Control High6.3EPSS 0.2%2026-04-01CVE Database V5CVE-2026-21629 The ajax component was excluded from the default logged-in-user check in the administrative area. This behavior was potentially unexpected by 3rd party developers. EPSS 0.2%Vulnerability Joomla! Project #cwe-284 #bit-joomla-2026-21629 #bitnami	CVE Database V5	2026-04-01

Showing 41–60 of 69 results